$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: 2puxajlYbQBwvZUXQL6BicJRKMXZQTR5RMQFDw15uus= Subject key identifier: 23:50:4E:12:28:BB:D4:1F:7D:B2:43:33:38:A8:FA:1C:C6:88:EE:4D Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F4328584F612D62D978140670960A04C0 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.43.188.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:62:d9:78:14:06:70:96:0a:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=b9f41616-f961-44ef-b8e9-601a710e4f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:b0:5a:51:52:7b:b1:9c:db:ac:d6:f9:f3: de:34:ce:93:1a:01:a5:7e:b9:d0:76:9b:f7:3c:f4: f0:28:77:14:8b:5f:b2:4f:cd:ec:f3:80:c1:9c:54: 32:5b:88:67:ff:9f:1f:5d:12:32:33:c3:e0:80:9f: bf:d3:ac:b3:e2:d8:ad:0d:a2:cb:20:39:b4:bc:a2: 3b:72:2c:8d:ef:c0:58:e1:c1:9c:01:55:05:b6:db: 8d:5f:e5:a3:db:a9:b3:b2:59:71:fa:08:f4:b4:5e: a1:0d:9f:47:68:25:92:2d:98:62:15:57:1f:9b:cd: 18:9f:51:f7:89:d1:e9:47:5c:4f:4d:e7:7e:50:f4: 6b:00:1b:ce:de:0e:a2:53:51:73:44:7d:b6:39:5b: bb:bc:81:e9:47:dd:6a:e9:dd:dd:9a:84:e5:3b:3a: a5:d1:67:1e:b4:16:65:3a:02:b2:ce:57:95:49:9a: 43:21:c9:cd:28:4a:4f:73:69:6b:d2:36:7b:27:48: bf:fc:6c:09:41:7a:cd:57:3b:67:48:88:ad:f4:4d: 31:43:31:c3:e5:f7:06:d8:da:51:1c:70:d7:d0:c4: 0f:d3:88:a4:bd:6f:e4:71:9b:30:75:23:07:11:cf: 0d:7b:aa:e6:ad:8f:cb:8f:53:18:6e:df:48:7d:7d: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:4E:12:28:BB:D4:1F:7D:B2:43:33:38:A8:FA:1C:C6:88:EE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:8e:e3:e1:3b:6d:7e:1c:28:15:db:a6:0b:8d:1b:c8:2e:49: 45:ed:ae:5f:3d:ae:14:47:96:68:f2:2a:52:6b:28:14:32:51: 8d:9e:b7:4d:fa:d8:57:81:a6:a8:05:22:2e:49:74:d0:f7:14: ba:fa:71:35:d9:fb:fb:bf:f5:2e:a1:c2:52:cf:fc:97:e0:3a: 30:ee:9b:33:0b:70:dd:84:89:57:d6:24:4e:06:3c:5c:11:0d: 70:4b:0d:d3:59:40:38:8f:5c:04:07:2e:c3:ce:b0:24:88:0e: 05:a2:e5:28:9a:4a:6f:10:bc:58:d8:53:35:f7:aa:50:eb:31: c5:7e:76:de:4c:44:ca:16:cf:78:c2:91:c0:7c:e4:f7:89:bc: da:ea:0e:da:0c:d0:f6:7a:4c:7b:6f:76:ef:52:ea:26:50:f7: ba:b6:35:6a:72:71:77:d0:85:b6:b8:01:48:64:c0:cc:6f:e4: 7e:9c:10:d4:2d:69:af:61:44:c5:32:91:7c:72:ae:14:ad:98: b1:f5:5a:06:2b:4c:df:01:0b:4d:47:2a:21:78:6c:20:15:19: 08:8c:75:6f:c1:66:aa:66:1a:62:39:d7:6d:84:f9:ac:3a:7e: d1:85:e4:d5:d7:97:b1:ed:c7:6d:dd:4b:a1:e3:cd:9b:ff:b2: 6c:48:05:da -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWE9hLWLZeBQGcJYKBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YjlmNDE2MTYtZjk2MS00NGVmLWI4ZTktNjAxYTcxMGU0Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqViwWlFSe7Gc26zW+fPeNM6TGgGlfrnQdpv3 PPTwKHcUi1+yT83s84DBnFQyW4hn/58fXRIyM8PggJ+/06yz4titDaLLIDm0vKI7 ciyN78BY4cGcAVUFttuNX+Wj26mzsllx+gj0tF6hDZ9HaCWSLZhiFVcfm80Yn1H3 idHpR1xPTed+UPRrABvO3g6iU1FzRH22OVu7vIHpR91q6d3dmoTlOzql0WcetBZl OgKyzleVSZpDIcnNKEpPc2lr0jZ7J0i//GwJQXrNVztnSIit9E0xQzHD5fcG2NpR HHDX0MQP04ikvW/kcZswdSMHEc8Ne6rmrY/Lj1MYbt9IfX2yBwIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFCNQThIou9QffbJDMzio+hzGiO5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADAK7wDBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQC/juPhO21+HCgV26YLjRvILklF7a5fPa4UR5Zo8ipSaygUMlGNnrdN+thXgaao BSIuSXTQ9xS6+nE12fv7v/UuocJSz/yX4Dow7pszC3DdhIlX1iROBjxcEQ1wSw3T WUA4j1wEBy7DzrAkiA4FouUomkpvELxY2FM196pQ6zHFfnbeTETKFs94wpHAfOT3 ibza6g7aDND2ekx7b3bvUuomUPe6tjVqcnF30IW2uAFIZMDMb+R+nBDULWmvYUTF MpF8cq4UrZix9VoGK0zfAQtNRyoheGwgFRkIjHVvwWaqZhpiOddthPmsOn7RheTV 15ex7cdt3Uuh482b/7JsSAXa -----END CERTIFICATE-----Generated at Sun Oct 4 02:20:55 2026 by rpki-client